Open source software security is always in the spotlight. Every time there is a cyber attack, a lot of time and effort is required to detect not just when, where and how it occurred, but also to measure the real impact on the applications and services that are running in digital environments. Recent cyber-attacks have highlighted the general lack of knowledge about code dependencies and attacks on the software supply chain.
A Software Bill of Materials (SBOM) helps organisations to meet new domestic and international cyber security requirement laws. Supply chains point out the relationships between the various components used in building software. These components include libraries and modules. They can be open source or proprietary, and free or paid.
Why are SBOMs needed?
An SBOM is a list of all the open source and thirdparty components present in a codebase. It also lists the licences that govern those components, the versions of the components used in the codebase, and their patch status. This helps security teams to quickly identify any associated security or licence risks.
An SBOM provides a machine readable list of components of the software and its dependencies. As it has become a key component for cloud security for private and government organisations, it is estimated that 88 per cent of organisations will use SBOMs by the end of 2023.
Similarly, smart organisations that build software maintain an accurate, up-to-date SBOM, which includes an inventory of third-party and open source components to ensure that their code is of high quality, compliant, and secure.
SBOMs and cyber security
This story is from the April 2023 edition of Open Source For You.
Start your 7-day Magzter GOLD free trial to access thousands of curated premium stories, and 9,000+ magazines and newspapers.
Already a subscriber ? Sign In
This story is from the April 2023 edition of Open Source For You.
Start your 7-day Magzter GOLD free trial to access thousands of curated premium stories, and 9,000+ magazines and newspapers.
Already a subscriber? Sign In
The Crucial Role of Open Source in Advancing Blockchain Technology
Open source and blockchain technology are like soulmates, forging connections, building bridges, and working together to create a future that is more open, inclusive, and equitable.
Why Open Source Dependencies Must be Managed
Unmanaged reliance on open source software may result in a Support crisis over a project’s life span, as well as financial loss for the organisation. Planned and regular upgrades of open source software components are a must.
Why Cloud Security Alone is Not Enough for Enterprises
Traditional and off-the-shelf security tools for the cloud may lull organisations into a false sense of being safe from cyber threats. This first article in the two-part series explains why organisations must develop an enterprise cloud security governance strategy’.
Openchain: Revolutionising Supply Chain Management
Openchain’s unique features cater specifically to enhancing supply chain management. This distributed ledger technology is helping to build a future where supply chains are more transparent, efficient, and secure.
Open Source, Private and Public Blockchain Platforms: What They Offer
Open source platforms play a crucial role in driving innovation and democratising access to blockchain technology. These platforms promise to have a significant impact on the future of society by offering a range of benefits.
Why Choose Hyperledger Sawtooth?
Hyperledger Sawtooth has earned a formidable reputation as a champion of modularity in the realm of enterprise blockchains. We delve into its components and functionalities, as well as the advantages it offers businesses seeking custom-crafted blockchain solutions.
Hyperledger Fabric: What You Should Know and Why
Understanding the essential features of Hyperledger Fabric is crucial for anyone looking to develop blockchain applications for enterprise use. These features provide the foundation for building secure, scalable, and privacy-focused applications, and can be leveraged to create innovative solutions that address real-world business challenges.
The Metaverse and Blockchain Technology: What the Future Holds
The integration of the metaverse with blockchain technology has opened exciting possibilities for managing digital assets in virtual environments. As virtual worlds become increasingly immersive and interconnected, the need for secure and efficient asset management solutions has never been greater.
Machine Learning Basics for a Newbie
Machine learning is a vast and rapidly evolving field, and this article serves as a stepping stone for those new to the domain. Explore the fundamental concepts of machine learning, from understanding the differences between traditional programming and ML to delving into various types of machine learning algorithms.
Human-AI Collaboration is the Future
Al-augmented decision making is making a transformative impact across various fields, benefiting a range of industries.
